CVE-2018-1089

high-risk
Published 2018-05-09

389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly leading to buffer overflows. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.

Do I need to act?

!
14.6% chance of exploitation in next 30 days
EPSS score — higher than 85% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (10)

Affected Vendors

Debian Redhat Fedoraproject

References (10)

Third Party Advisory http://www.securityfocus.com/bid/104137
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:1364
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:1380
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1089
Mailing List https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html
Third Party Advisory http://www.securityfocus.com/bid/104137
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:1364
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:1380
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1089
Mailing List https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html
54
/ 100
high-risk
Severity 26/34 · High
Exploitability 12/34 · Low
Exposure 16/34 · Moderate